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% ~ A, method of facilitating redirection of traffic sent from a first processing 

device to a seconaprocessing device, the method comprising: 

at aVhird processing device associated with a plurality of traffic 
handling systems, receiving traffic information from at least a portion of the 
associated trafficVandling systems, wherein the traffic information specifies 
which data should \e redirected to the portion of associated traffic handling 
systems; and 

determining hovk to redirect data received by the third processing 
device to a selected traffuj handling system based on the received traffic 
information. 



" 5 ." 2. A method as recited in cl\im 1, wherein the determination of redirecting data 

fli is accomplished by: 

□ communicating the traffic information to at least a designated one of 

S 15 the associated traffic handling systems; and 

at the third processing device, receiving traffic redirection information 

from the designated traffic handling systemVthe traffic redirection information 

being based on the communicated traffic information. 



3. A method as recited in claim 1, further comprising: 
20 at the third processing device, building ok updating a data structure 

based on the received traffic information, wherein Wie traffic information is 
communicated to the designated traffic handling system within the data 
structure. 
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A method as recited in claim 1, further comprising: 
in the third processing device, receiving a packet from the first 
processing device destined for the second processing device; and 

redirecting the packet to a selected one of the traffic handling systems 
based on theStraffic redirection information. 



5. A method as recited in claim 4, further comprising: 
receiving t\(ie packet back after redirecting it to the selected traffic 

handling system; 

determining tflat the packet is to be sent to the packet's original 
10 destination address instead of being redirected to the selected traffic handling 

system; and 

sending the packet to\ts original destination. 

6. A method as recited in claim 5, wherein it is determined that the packet is to 
be sent to the packet's original destinatiorfvby determining that the packet is encapsulated and 

15 de-encapsulating the packet prior to sendina the packet to its original destination. 

7. A method as recited in claim V wherein the traffic information sent from a 
selected traffic handling system to the third Processing device includes service options 
specifying which data is to be redirected to the selected traffic handling system. 

8. A method as recited in claim 7, wherem the service options include a plurality 
20 of fields that are configurable to indicate that one or more fields of a packet received in the 

third processing device are to be used to determined redirection of packets to the selected 
traffic handling system. 
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I SL A method as recited in claim 8, wherein the fields are selected from a group 
consistingVf a source IP field, a destination IP field a source port field, a destination port 
field, a sourcet IP alternative field, a destination IP alternative field, a source port alternative 
field, and a destination port alternative field. 

10. A method as recited in claim 9, wherein each field indicates that a 
corresponding field of a packet received in the third processing device is to be used to 
generate an index to a rable identifying the plurality of associated traffic handling systems, 
the generated index being Associated with the selected traffic handling system. 

11. A method as recited in claim 10, wherein each field indicates that a hashed 
value of the corresponding fieldW the received packet is to be used to generate the index to 
the table identifying the plurality okassociated traffic handling systems. 

12. A method as recited inVlaim 8, wherein at least one of the fields may be set 
to indicate one or more port identifiers oXtraffic received in the third processing device. 

13. A method as recited in clairm8, wherein the fields are selected from a group 
consisting of a port 0 field, a port 1 field, a pott 2 field, a port 3 field, a port 4 field, a port 5 
field, a port 6 field, and a port 7 field. \ 

14. A method as recited in claim \l3, wherein the fields includes a 
source/destination field to indicate whether the portVdentifiers of the received traffic are 
source ports or destination ports. \ 

15. A method as recited in claim 6, further comprising: 

in the third processing device, receiving a Vacket from the first 
processing device destined for the second processing device; and 
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when one or more port identifiers of the received packet matches a 
orrespotoding set field of the service options of the selected traffic handling 
system, redirecting the packet to the selected traffic handling system. 

16. A method as recited in claim 1, wherein the traffic information sent from a 
5 selected traffic handling system to the third processing device includes security options for 

specifying an authentication Itevel for messages communicated between the third processing 
device and the selected traffic handling system. 

17. A method as recitfed in claim 16, wherein the security options are 
\Q configurable to select no authentication for messages communicated between the third 
□ 10 processing device and the selected trafficViandling system. 

13.1 \ 

y 18. A method as recited in CJaim 16, wherein the security options are 

!L configurable to require a predetermined password encoded within messages communicated 

Y B \ between the third processing device and the selected traffic handling system. 

j~ 19. A method as recited in claim 1, whetein the traffic information sent from a 

selected traffic handling system includes identifying^nformation for the selected traffic 
handling system. 
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20. A method of facilitating redirection of trafnf sent from a first processing 
device to a second processing device, the method comprising: 

at a designated traffic handling system associated with a plurality of 
traffic handling systems and one or more routers, receiving traffic information 
from at least one of the routers, wherein the traffic information specifies 
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^which data should be redirected to which associated traffic handling systems; 

allocating traffic portions to each traffic handling system based on the 
received traffic information. 

21. AViethod as recited in claim 20, wherein the traffic portions are allocated by: 

building or updating a data structure based on the received traffic 
information within a third processing device that receives traffic sent from a 
first processings device to a second processing device, the data structure 
specifying how ro direct traffic received in the third processing device to 
selected traffic handling systems associated with the third processing device. 



22. A method as incited 
service options specifying whic^; 
m system. 



in claim 20, wherein the traffic information includes 
data is to be redirected to the selected traffic handling 



23. A method as recited irv claim 22, wherein the service options include a 
15 plurality of fields that are configurableVo indicate that one or more fields of a packet 

received in the third processing device are ta be used to determined redirection of packets to 
the selected traffic handling system. 

24. A method as recited in claim 23, therein the flags are selected from a group 
consisting of a source IP field, a destination IP fielM, a source port field, a destination port 

20 field, a source IP alternative field, a destination IP alterative field, a source port alternative 
field, and a destination port alternative field. 
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25. A method as recited in claim 24, wherein each field indicates that a 
corresponding field of a packet received in the third processing device is to be used to 
generate anSindex to a table identifying the plurality of associated traffic handling systems, 
the generated index being associated with the selected traffic handling system. 

5 26. A m^hod as recited in claim 25, wherein each field indicates that a hashed 

value of the corresponding field of the received packet is to be used to generate the index to 
the table identifying the plurality of associated traffic handling systems. 

27. A method as recited in claim 23, wherein at least one of the fields may be set 
=|j to indicate one or more port identifiers of traffic received in the third processing device. 

Si 10 28. A method as recited i\claim 27, wherein the fields are selected from a group 

5; consisting of a port 0 field, a port 1 fielcL a port 2 field, a port 3 field, a port 4 field, a port 5 

)L field, a port 6 field, and a port 7 field. \ 

2? 29. A method as recited in claim 28, wherein the fields includes a 

JS; source/destination field to indicate whether theXport identifiers of the received traffic are 

15 source ports or destination ports. \ 

30. A method as recited in claim 20, wherein the traffic information includes 
security options for specifying an authentication level fok messages communicated between 
the third processing device and the selected traffic handling \ystem. 

31. A method as recited in claim 30, whereiW the security options are 
20 configurable to select no authentication for messages commukicated between the third 

processing device and the selected traffic handling system. \ 
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32. A method as recited in claim 30, wherein the security options are 
configurable to require a predetermined password encoded within messages communicated 
between theSthird processing device and the selected traffic handling system. 

33. A method as recited in claim 20, wherein the traffic information includes 
5 identifying information for the selected traffic handling system. 

34. A method of reinserting a redirected packet into a flow between a first 
processing device and a sefcond processing device, the method comprising: 

receiving a redirected packet from a third processing device in a fourth 
processing device; and \ 
10 sending the packtet back to the third processing device for 

transmission. \ 

35. A method as recited inVlaim 34, further comprising encapsulating the 
redirected packet prior to sending the packed back so as to indicate that the packet is not to 
be redirected by the third processing device back to the fourth processing device. 

15 36. A method as recited in claim ^85, wherein the redirected packet is 

encapsulated in a GRE packet. \ 

37. A method as recited in claim 34, further comprising modifying the redirected 
packet prior to sending the packet back. \ 

38. A method as recited in claim 37, wherein k destination address of the 
20 redirected packet is modified prior to sending the packet back. \ 
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A method as recited in claim 34, further comprising making a copy of the 
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redirected jacket prior to sending the packet back. 

40. \A first computer system associated with a plurality of traffic handling systems 
and operable to facilitate redirection of traffic sent from a second computer system to a third 
computer system, the traffic being redirected to a selected traffic handling system, the 
computer system comprising: 
a memory; and 

a processor coupled\o the memory, 

wherein at least one orSthe memory and the processor are adapted to provide: 
receiving traffic information from at least a portion of the associated 

traffic handling systems, wlterein the traffic information specifies which data 

should be redirected to the ponion of associated traffic handling systems; 

communicating the traffic^ information to at least a designated one of 

the associated traffic handling systems; and 

receiving traffic redirection information from the designated traffic 

handling system, the traffic redirection^ information being based on the 

communicated traffic information. 



41. A computer system as recited in claim 40^wherein at least one of the memory 
and the processor are further adapted to provide: 
20 building or updating a data structure based \>n the received traffic 

information, wherein the traffic information is communicated to the 
designated traffic handling system within the data structure. 
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4-2. A computer system as recited in claim 40, wherein at least one of the memory 
and the processor are further adapted to provide: 

teceiving a packet from a second computer system destined for a third 
computer System; and 

redirecting the packet to a selected one of the traffic handling systems 
based on the traffic redirection information. 

43. A computeXsystem as recited in claim 42, wherein at least one of the memory 
and the processor are furtherVdapted to provide: 

receiving the packet back after redirecting it to the selected traffic 
handling system; 

determining that the\packet is to be sent to the packet's original 
destination address instead of be(ng redirected to the selected traffic handling 
system; and 

sending the packet to its original destination. 

44. A computer system as recited in claim 43, wherein it is determined that the 
packet is to be sent to the packet's original destination by determining that the packet is 
encapsulated and de-encapsulating the packet prior tt^ sending the packet to its original 
destination. 

45. A computer system as recited in claim 40, wherein the traffic information sent 
from a selected traffic handling system includes service option^ specifying which data is to 
be redirected to the selected traffic handling system. 

46. A computer system as recited in claim 45, wherein the\ervice options include 
a plurality of fields that are configurable to indicate that one or mork fields of a packet 
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received m the first computer system are to be used to determined redirection of packets to 
the selected traffic handling system. 

47. A\computer system as recited in claim 46, wherein the fields are selected 
from a group consisting of a source IP field, a destination IP field, a source port field, a 

5 destination port field A source IP alternative field, a destination IP alternative field, a source 
port alternative field, anoSa destination port alternative field. 

48. A computer sWem as recited in claim 47, wherein each field indicates that a 
corresponding field of a packet received in the first computer system is to be used to 
generate an index to a table identifying the plurality of associated traffic handling systems, 

10 the generated index being associated with the selected traffic handling system. 

49. A computer system as recited in claim 48, wherein each field indicates that a 
hashed value of the corresponding field of the received packet is to be used to generate the 
index to the table identifying the plurality orassociated traffic handling systems. 

50. A computer system as recited imclaim 46, wherein at least one of the fields 
15 may be set to indicate one or more port identifiers Vf traffic received in the computer system. 

51. A computer system as recited in claim 50, wherein the fields are selected 
from a group consisting of a port 0 field, a port 1 field\a port 2 field, a port 3 field, a port 4 
field, a port 5 field, a port 6 field, and a port 7 field. 

52. A computer system as recited in claim 5 1\ wherein the fields includes a 
20 source/destination field to indicate whether the port identifiers of the received traffic are 

source ports or destination ports. 
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^^dO [ \\ 53. A computer system as recited in claim 50, wherein at least one of the memory 

and the^rocessor are further adapted to provide: 

receiving a packet from a first processing device destined for a second 
preceding device; and 

len one or more port identifiers of the received packet matches a 
corresponding set field of the service options of the selected traffic handling 
system, redirecting the packet to the selected traffic handling system. 

54. A computer system as recited in claim 40, wherein the traffic information sent 
from a selected traffic handrmg system to the first computer system includes security options 

10 for specifying an authentication level for messages communicated between the first 
computer system and the selectecrtfraffic handling system. 

55. A computer system asv recited in claim 54, wherein the security options are 
configurable to select no authentication for messages communicated between the first 
computer system and the selected traffic handling system. 

15 56. A computer system as recited Vi claim 54, wherein the security options are 

configurable to require a predetermined password encoded within messages communicated 
between the first computer system and the selected traffic handling system. 

57. A computer system as recited in claim 40, wherein the traffic information sent 
from a selected traffic handling system includes identifying information for the selected 

20 traffic handling system. 

58. A designated traffic handling system associated with a plurality of traffic 
handling systems and operable to facilitate redirection of trafficv sent from a first computer 
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syst&m to a second computer system, the traffic being redirected by a third computer system 
to a selected traffic handling system, the designated traffic handling system comprising: 
a memory; and 

a processor coupled to the memory, 

whereinVt least one of the memory and the processor are adapted to provide: 
receiving traffic information from the third computer system, wherein 

the traffic information specifies which data should be redirected to which 

associated trafficVandling systems; and 

allocating traffic portions to each traffic handling system based on the 

received traffic informMion. 

59. A designated traffic handling system as recited in claim 58, wherein the 
traffic portions are allocated by: \ 

building or updating a\data structure based on the received traffic 
information within the third processing device that receives traffic sent from 
the first processing device to the secVid processing device, the data structure 
specifying how to direct traffic received in the third processing device to 
selected traffic handling systems associated with the third processing device. 

60. A designated traffic handling system as recited in claim 58, wherein the 
traffic information includes service options specifyingVvhich data is to be redirected to the 
selected traffic handling system. \ 

61. A designated traffic handling system as reaited in claim 60, wherein the 
service options include a plurality of fields that are configurable to indicate that one or more 
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fields\pf a packet received in the third processing device are to be used to determined 
redirection of packets to the selected traffic handling system. 

62. \ A designated traffic handling system as recited in claim 61, wherein the fields 
are selected from a group consisting of a source IP field, a destination IP field, a source port 

5 field, a destinatiokport field, a source IP alternative field, a destination IP alternative field, a 
source port alternative field, and a destination port alternative field. 

63. A designated traffic handling system as recited in claim 62, wherein each 
field indicates that a corresponding field of a packet received in the third processing device 

J|5 is to be used to generate am index to a table identifying the plurality of associated traffic 

O 10 handling systems, the generated index being associated with the selected traffic handling 
m \ 

IB system. \ 

- 64. A designated traffic handling system as recited in claim 63, wherein each 

field indicates that a hashed value of the corresponding field of the received packet is to be 
js; used to generate the index to the table identifying the plurality of associated traffic handling 

15 systems. \ 

65. A method as recited in claim 6 1\ wherein at least one of the fields may be set 
to indicate one or more port identifiers of traffic received in the third processing device. 

66. A method as recited in claim 65, wherein the fields are selected from a group 
consisting of a port 0 field, a port 1 field, a port 2 field\a port 3 field, a port 4 field, a port 5 

20 field, a port 6 field, and a port 7 field. \ 
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\ J 67\ A designated traffic handling system as recited in claim 66, wherein the fields 

includes a source/destination field to indicate whether the port identifiers of the received 
traffic are sourcfe ports or destination ports. 

68. A designated traffic handling system as recited in claim 58, wherein the 
5 traffic information includes security options for specifying an authentication level for 

messages communicatee between the third processing device and the selected traffic 
handling system. \ 

69. A designatedvtraffic handling system as recited in claim 68, wherein the 
security options are configurable to select no authentication for messages communicated 

•~r 10 between the third processing device and the selected traffic handling system. 



70. A designated traffia handling system as recited in claim 68, wherein the 



security options are configurable to require a predetermined password encoded within 



messages communicated between tha third processing device and the selected traffic 



handling system. 
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71. 



A method as recited in claim 68, wherein the traffic information includes 



identifying information for the selected traffic ^handling system. 



72. A first processing system operablV to reinsert a redirected packet into a flow 



between a second processing device and a third processing device, the computer system 



comprising: 



20 



a memory; and 



a processor coupled to the memory, 
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wherein at least one of the memory and the processor are adapted to 
pro^e: 

receiving a redirected packet from a fourth processing device 
in tije first processing device; and 

.sending the packet back to the fourth processing device for 
transmission. 

73. A processing system as recited in claim 72, wherein at least one of the 
memory and the processor ark further adapted to provide encapsulating the redirected packet 
prior to sending the packet bacft so as to indicate that the packet is not to be redirected by the 
fourth processing device back to me first processing device. 

74. A processing system \s recited in claim 73, wherein the redirected packet is 
encapsulated in a GRE packet. 

75. A processing system as recited in claim 72, wherein at least one of the 
memory and the processor are further adapted to provide modifying the redirected packet 
prior to sending the packet back. 

76. A processing system as recited in cfctim 75, wherein a destination address of 
the redirected packet is modified prior to sending the jacket back. 

77. A processing system as recited in claim 72, wherein at least one of the 
memory and the processor are further adapted to provide\making a copy of the redirected 
packet prior to sending the packet back. 
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78. A computer program product for facilitating redirection of traffic sent from a 
first pro^ssing device to a second processing device, the computer program product 
comprising:\ 

\t least one computer readable medium; 
5 computer program instructions stored within the at least one computer 

readable product configured to cause a processing device to provide: 

at a third processing device associated with a plurality of traffic 
handling systems, receiving traffic information from at least a portion 
of the associated traffic handling systems, wherein the traffic 
I 10 information specifies which data should be redirected to the portion of 

associated traffic handling systems; 

communicating the traffic information to at least a designated 
one of the associated traffic handling systems; and 

at the third processing device, receiving traffic redirection information 
; 15 from the designated traffic handling system, the traffic redirection information being 

based on the communicated traffic information. 

79. A computer program product for facilitating redirection of traffic sent from a 
first processing device to a second processing dev\ce, the computer program product 
comprising: \ 

20 at least one computer readable medium; \ 

computer program instructions stored within the^at least one computer 
readable product configured to cause a processing device to provide: 

at a designated traffic handling system associated with a 
plurality of traffic handling systems and one or more routers, Receiving traffic 
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information from at least one of the routers, wherein the traffic information 
specifies which data should be redirected to which associated traffic handling 
systems; and\ 

allocating traffic portions to each traffic handling system based 
on the received traffic information. 
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